
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/2C7C9DD2258E11F0B42E1529C4F9AE02.roa
File: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (raw, json)
Hash identifier: ooDmK99ixwmZHb01igd9edAZRWXI26i5vbPS7c6NFw0=
Subject key identifier: D8:1B:F6:F5:9E:5E:4B:CB:68:26:76:A7:C9:07:00:CE:D3:4F:FC:1D
Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Certificate serial: 0153
Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/2C7C9DD2258E11F0B42E1529C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:11:10 +0000
ROA not before: Wed 21 May 2025 05:16:52 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 151627
IP address blocks: 103.25.10.0/23 maxlen: 23
103.25.10.0/24 maxlen: 24
103.25.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC
Validity
Not Before: May 21 05:16:52 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a58c6e-b795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:24:71:6a:27:7c:6e:6f:a4:65:44:c3:e3:
14:97:87:82:dc:c7:87:02:f3:4d:3c:28:01:86:d6:
f5:23:d6:4f:df:96:93:fe:89:2f:c8:e2:3a:f4:bd:
c0:65:a9:00:5b:92:28:76:cd:40:ce:8d:48:f4:28:
0f:5f:6c:24:7a:b2:08:6e:0d:2e:de:e8:d6:8c:26:
f2:13:6e:9a:2b:9e:33:ad:75:96:bf:6c:07:e9:25:
ec:45:de:6b:24:4b:4a:b7:a2:2e:e2:8c:55:29:b3:
d0:b1:24:48:e1:a9:a7:1f:85:e8:b5:50:4c:7c:33:
33:33:f0:ed:c3:58:3a:f7:40:aa:d9:3b:34:44:83:
d7:32:3f:44:f8:05:ee:65:15:8c:25:dd:3f:fe:53:
68:9f:9b:00:ab:d5:31:49:26:7b:56:11:61:82:75:
e4:d0:2e:47:57:5a:d8:6c:de:80:4e:87:bb:3f:63:
2d:ea:6d:c9:b3:68:05:f3:dc:12:cb:75:f7:3f:32:
2b:17:5a:8b:ed:7e:41:c7:1b:53:a4:e5:cf:5b:76:
93:06:0d:5e:6e:e4:37:b9:35:76:f7:34:99:b5:22:
33:48:16:24:da:a7:11:36:e4:9d:4e:a6:ed:19:cf:
a5:d4:99:d7:8a:18:4c:a1:e8:5e:4c:cb:26:7c:35:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1B:F6:F5:9E:5E:4B:CB:68:26:76:A7:C9:07:00:CE:D3:4F:FC:1D
X509v3 Authority Key Identifier:
keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/2C7C9DD2258E11F0B42E1529C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.25.10.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:46:67:57:ba:9a:78:25:11:4c:77:16:08:89:ff:06:8e:be:
0a:6f:34:a8:46:fc:ea:5a:38:71:b8:07:af:33:e1:6e:f9:93:
01:02:70:9f:11:ad:43:45:81:8c:41:58:25:7c:64:76:2a:97:
70:58:9a:48:d8:62:1e:98:40:19:06:22:06:a6:8b:4e:ab:14:
d9:fe:37:93:50:b1:9d:00:86:07:a7:65:a6:56:c9:4a:e4:84:
ca:8d:34:6f:4e:89:1a:50:67:7e:7f:79:a6:04:94:b7:ee:63:
7a:db:b3:f1:9e:63:43:10:d1:07:af:91:06:e0:25:28:76:a8:
5c:0b:71:9e:70:3b:5b:bc:17:0a:90:db:75:0e:e8:2e:b9:8a:
6f:38:43:8d:73:b4:ed:98:01:5d:46:66:8a:3b:2c:42:24:f1:
58:47:33:a7:bd:35:3b:ad:32:6d:d0:0f:d6:0d:11:67:c5:31:
6c:d8:f4:94:03:9f:47:5b:13:a6:44:35:5a:72:38:54:95:ef:
e5:1a:dc:ff:60:31:6d:41:a6:36:14:13:bf:5d:d1:08:7e:d6:
85:10:e6:a7:cb:6d:57:13:e3:85:c8:8c:61:0f:0e:fc:65:9f:
2b:ac:6c:12:b8:b3:d6:f8:79:74:3e:86:aa:f3:7c:4c:f7:75:
7e:48:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:57 2026 by rpki-client